$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft File: JhWWtVbpLBLS68jdiyXPuHWOB4w.mft (raw, json) Hash identifier: 1V6X/Qa1A1cZFKyGwEdvX2rXD+Pm33/FHWxIaF4I4kg= Subject key identifier: FA:A7:E5:40:D4:DF:9D:B5:9B:86:82:74:BC:D5:38:DD:5F:32:82:42 Authority key identifier: 26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C Certificate issuer: /CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft Manifest number: 0126 Signing time: Fri 09 May 2025 03:49:23 +0000 Manifest this update: Fri 09 May 2025 03:49:23 +0000 Manifest next update: Fri 16 May 2025 03:49:23 +0000 Files and hashes: 1: JhWWtVbpLBLS68jdiyXPuHWOB4w.crl (hash: kd2W7SD1KAFzqXC4CXakwYSX/s1UVlx/HfJ6OhZqa2Q=) 2: 259AE280753B11EEBF306F35C4F9AE02.roa (hash: 0uSx3t0sR7mDLL0tE9/KLBX+RXK70BKf32W+7mKLwxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFC48, serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C Validity Not Before: May 9 03:49:23 2025 GMT Not After : May 16 03:49:23 2025 GMT Subject: CN=681d7b43-e8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:14:ca:db:b3:ae:35:c5:17:42:b0:71:ee:b2: 51:1f:a0:59:5b:c5:ff:8e:00:f0:86:b4:7f:c0:ba: c9:55:8b:63:15:2c:89:92:de:a7:98:d5:72:bb:d5: 58:18:b9:20:82:8c:bd:f1:71:df:63:b9:f6:6e:14: 01:95:4b:91:06:d2:f3:30:e6:06:d2:40:35:eb:aa: 96:98:8e:24:d7:e5:33:67:c0:87:66:c3:83:94:d6: 04:48:eb:18:41:5e:cf:10:5a:3a:a3:5e:1a:51:5c: 4a:86:b2:b1:99:41:d5:0b:a9:22:9e:59:93:13:c0: ce:b3:19:14:35:9c:ad:b8:85:0a:27:92:5c:0a:fc: 3c:0e:53:3f:f3:4e:1e:a9:32:94:11:3c:97:35:f4: 02:5d:42:44:89:39:f3:ea:69:0c:48:d4:a4:f1:10: ac:67:af:77:d1:71:8e:25:51:23:b5:24:cb:9a:2f: df:c5:82:90:7e:97:e7:4c:a7:a7:c6:2c:6e:a6:08: c6:42:df:2e:95:6a:a5:2c:9c:e2:0d:bf:6d:03:84: 33:c7:57:3b:65:c5:72:79:f2:d5:91:56:03:bf:95: 0f:f8:2e:2b:80:68:c1:3d:9d:e8:15:08:bf:1c:9b: ac:f5:66:7c:8e:5e:d4:53:be:75:49:01:5b:9c:83: c6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A7:E5:40:D4:DF:9D:B5:9B:86:82:74:BC:D5:38:DD:5F:32:82:42 X509v3 Authority Key Identifier: keyid:26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e9:8c:e6:41:6c:f6:8f:da:62:ee:dd:bb:b9:2d:3a:d6:c8: 06:33:68:2f:8c:30:58:9b:d0:63:74:0f:fc:f0:60:c3:70:45: c2:5e:95:dc:b9:60:de:ec:d9:3c:cd:e8:d9:25:10:fc:7d:f4: 6d:48:5a:66:72:a3:bf:92:f8:09:23:f7:1e:eb:ff:23:97:38: d5:22:a0:9a:f4:8e:50:46:1b:89:46:a0:03:08:88:31:43:b4: 2d:cd:6e:f5:6e:57:7d:6b:2d:d0:e9:5f:79:62:0e:49:86:df: 91:19:66:a5:b2:d4:36:9b:62:9c:20:3b:52:eb:cf:a1:74:07: 3c:e3:e9:3f:57:8a:bb:82:55:2a:c6:b5:d2:3e:be:48:21:78: 60:85:bf:86:44:78:15:79:0b:f0:e0:9e:a2:0c:68:03:43:aa: 70:7d:95:90:ed:41:9e:ab:b3:a2:b9:a3:40:0a:a0:2a:2d:09: 92:73:9c:50:bb:f4:8b:bb:f5:b0:3c:d0:3b:b1:cd:81:e2:23: 91:48:36:58:02:54:ae:b2:6b:16:b8:4f:81:77:b1:e1:d2:5a: 82:c8:04:7e:24:31:5e:0f:c4:ca:b0:f9:fa:cc:ee:56:25:b5: 95:f6:43:ec:6f:f6:b4:24:ec:17:46:96:d4:37:75:fb:f7:50: 91:77:6d:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZDNDgxMTAvBgNVBAUTKDI2MTU5NkI1NTZFOTJDMTJEMkVCQzhERDhCMjVDRkI4 NzU4RTA3OEMwHhcNMjUwNTA5MDM0OTIzWhcNMjUwNTE2MDM0OTIzWjAYMRYwFAYD VQQDEw02ODFkN2I0My1lOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hTK27OuNcUXQrBx7rJRH6BZW8X/jgDwhrR/wLrJVYtjFSyJkt6nmNVyu9VY GLkggoy98XHfY7n2bhQBlUuRBtLzMOYG0kA166qWmI4k1+UzZ8CHZsODlNYESOsY QV7PEFo6o14aUVxKhrKxmUHVC6kinlmTE8DOsxkUNZytuIUKJ5JcCvw8DlM/804e qTKUETyXNfQCXUJEiTnz6mkMSNSk8RCsZ6930XGOJVEjtSTLmi/fxYKQfpfnTKen xixupgjGQt8ulWqlLJziDb9tA4Qzx1c7ZcVyefLVkVYDv5UP+C4rgGjBPZ3oFQi/ HJus9WZ8jl7UU751SQFbnIPGYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqn5UDU 3521m4aCdLzVON1fMoJCMB8GA1UdIwQYMBaAFCYVlrVW6SwS0uvI3Yslz7h1jgeM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkM0OC9EQkJEODFGRTc1 M0ExMUVFQkY0OUU1MzRDNEY5QUUwMi9KaFdXdFZicExCTFM2OGpkaXlYUHVIV09C NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0poV1d0VmJwTEJMUzY4amRpeVhQdUhXT0I0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkM0OC9EQkJEODFGRTc1M0ExMUVFQkY0OUU1MzRDNEY5QUUwMi9KaFdXdFZicExC TFM2OGpkaXlYUHVIV09CNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh6YzmQWz2j9pi7t27uS061sgGM2gvjDBYm9BjdA/88GDDcEXCXpXc uWDe7Nk8zejZJRD8ffRtSFpmcqO/kvgJI/ce6/8jlzjVIqCa9I5QRhuJRqADCIgx Q7QtzW71bld9ay3Q6V95Yg5Jht+RGWalstQ2m2KcIDtS68+hdAc84+k/V4q7glUq xrXSPr5IIXhghb+GRHgVeQvw4J6iDGgDQ6pwfZWQ7UGeq7OiuaNACqAqLQmSc5xQ u/SLu/WwPNA7sc2B4iORSDZYAlSusmsWuE+Bd7Hh0lqCyAR+JDFeD8TKsPn6zO5W JbWV9kPsb/a0JOwXRpbUN3X791CRd203 -----END CERTIFICATE-----Generated at Sat May 10 22:28:23 2025 by rpki-client